Security advisories

medium2022-12-21

CVE-2022-4617-Microweber vulnerable to Reflected Cross-site Scripting

View chart →

microweber/microweber · GHSA-3mmh-vq9w-4c3g

medium2022-12-20

CVE-2022-46870-Apache Zeppelin Cross-site Scripting vulnerability

View chart →

apache/zeppelin · GHSA-9p8j-hrgf-jc2g

high2022-12-20

CVE-2022-23542-OpenFGA Authorization Bypass

View chart →

openfga/openfga · GHSA-m3q4-7qmj-657m

critical2022-12-20

CVE-2022-46421-Apache Airflow Hive Provider vulnerable to Command Injection

View chart →

apache/airflow · GHSA-rc58-qr9j-cpgw

high2022-12-20

CVE-2022-25931-easy-static-server vulnerable to Directory Traversal

View chart →

cunjieliu/easyserver · GHSA-wcwm-c3mr-pxcr

high2022-12-20

CVE-2022-25171-p4 vulnerable to Command Injection due to improper input sanitization

View chart →

natelong/p4 · GHSA-jfm8-hwhg-r6gg

high2022-12-20

CVE-2022-25940-lite-server vulnerable to Denial of Service

View chart →

johnpapa/lite-server · GHSA-89w7-5q45-r53w

critical2022-12-20

CVE-2022-25904-safe-eval vulnerable to Prototype Pollution

View chart →

hacksparrow/safe-eval · GHSA-33vh-7x8q-mg35

medium2022-12-19

CVE-2022-39304-ghinstallation returns app JWT in error responses

View chart →

bradleyfalzon/ghinstallation · GHSA-h4q8-96p6-jcgr

medium2022-12-19

CVE-2022-23536-Cortex's Alertmanager can expose local files content via specially crafted config

View chart →

cortexproject/cortex · GHSA-cq2g-pw6q-hf7j

medium2022-12-19

CVE-2022-42949-SilverStripe Subsite weakens file permissions

View chart →

silverstripe/silverstripe-subsites · GHSA-cx45-565q-6qx8

medium2022-12-19

CVE-2021-4260-Oils JS vulnerable to Open Redirect

View chart →

mannyvergel/oils-js · GHSA-v279-v2xm-whq9

critical2022-12-19

CVE-2020-36618-FurqanSoftware/node-whois vulnerable to Prototype Pollution

View chart →

furqansoftware/node-whois · GHSA-97jv-c342-5xhc

critical2022-12-19

CVE-2021-4262-laravel-jqgrid vulnerable to SQL Injection

View chart →

mgallegos/laravel-jqgrid · GHSA-3fhj-wpvj-x5w8

medium2022-12-19

CVE-2022-4609-Memos Cross-site Scripting vulnerability

View chart →

usememos/memos · GHSA-rgj5-jj5q-v3v7

medium2022-12-19

CVE-2022-47500-Apache Helix UI vulnerable to Open Redirect

View chart →

apache/helix · GHSA-mhxg-2xf7-4xwx

high2022-12-19

CVE-2016-20018-Knex.js has a limited SQL injection vulnerability

View chart →

knex/knex · GHSA-4jv9-3563-23j3

high2022-12-19

CVE-2021-4250-active_attr Improper Resource Shutdown or Release vulnerability

View chart →

cgriego/active_attr · GHSA-4whf-rmx5-8frv

critical2022-12-18

CVE-2021-4248-DNS NuGet package uses insufficiently random values

View chart →

kapetan/dns · GHSA-g3wc-xv93-445q

medium2022-12-17

CVE-2022-4589-Terms and Conditions Module vulnerable to Open Redirect

View chart →

cyface/django-termsandconditions · GHSA-6rmf-cv6p-4h27